Whatsapp Security Flaw Lets Anyone Spy On Private Chats

Creepy hackers could secretly eavesdrop on your private WhatsApp group chats, experts claim

A group of security researchers from Ruhr University in Germany has revealed a security loophole in the end-to-end encrypted messaging app WhatsApp.

Any individual that is in charge of the servers could embed new people in private group chats without needing the authority from the admin. Once an attacker with control of the WhatsApp server had access to the conversation, he or she could also use the server to selectively block any messages in the group, including those that ask questions, or provide warnings about the new entrant. All group members are deemed administrators, and can thus add a new group member by sending an encrypted group management message to the other participants. And the WhatsApp spokesperson also noted that preventing the Ruhr University researchers' attack would likely break a popular WhatsApp feature known as a "group invite link" that allows anyone to join a group simply by clicking on a URL.

The problem sits in WhatsApp's authentication mechanism for adding people to group chats.

With over 1.2 billion monthly active users, WhatsApp is available in more than 50 different languages around the world and in 10 Indian languages.

Watch Margot Robbie recall the awkward time she met Obama
When they did finally set out on their romantic Tahitian honeymoon, they stayed at a small luxury resort for part of their trip. The hotel suggested that they could visit the gym. "I can see everything", said Robbie.

The only people who can get access to WhatsApp servers are staff and governments if they are taking some legal actions. The flaw here is obvious: since the group management messages are not signed by the administrator, a malicious WhatsApp server can add any user it wants into the group. It would appear as if the new person on the group chat had the authority of the admin to enter the chat.

In a statement to Wired, WhatsApp said it had looked into the problem.

"Alex Stamos, the Chief Security Officer of Facebook, in response to the report said on Twitter, "[sic] Read the Wired article today about WhatsApp - scary headline! We built WhatsApp so group messages can not be sent to a hidden user. And, if you scroll through the unread messages in the WhatsApp group manually, then the button will vanish automatically. WhatsApp has added end-to-end encryption across the app and made all conversations on the group private, which means it can not be read by any third-party, be it government, criminals or even WhatsApp itself.

We completed the implementation of end-to-end encryption in 2016 for all messaging and calling on WhatsApp so that no one, not even us, has access to the content of your conversations. Typical group chats are managed by one person who is identified as the administrator of the chat.

Related:

  • Armed thieves rob Ritz jewelry shop

    Armed thieves rob Ritz jewelry shop

    Interior Minister Gerard Collomb praised the responding officers for the arrests, saying they had "done our police force credit". Unlike the action movie, three of the five thieves were quickly caught and arrested by police the same day.
    Stock On the Run: Brandywine Realty Trust (BDN)

    Stock On the Run: Brandywine Realty Trust (BDN)

    Jefferies has "Hold" rating and $14000 target. (NYSE:EDR) on Tuesday, September 15 with "Market Outperform" rating. Twin Tree Limited Partnership reported 43,161 shares. 471,050 were reported by Asset Management One Communication.
    Walmart raising starting wage, offering bonuses after GOP tax bill

    Walmart raising starting wage, offering bonuses after GOP tax bill

    But Target Corp, a main competitor , pushed its entry level wage to $11 last fall and has pledged to hit $15 by the end of 2020. Walmart said the wage increases would add about $300 million in expenses to its budget for the next fiscal year.
  • Texas A&M Women's Basketball: Carter Named To Wooden Award Midseason Top 25

    Texas A&M Women's Basketball: Carter Named To Wooden Award Midseason Top 25

    Oklahoma guard Trae Young has been arguably the best player in the nation and wasn't listed on the preseason top 50 watch list. The outstanding OU freshman is one of 25 players named to the midseason candidate list for the prestigious annual award.
    Jessica Falkholt's remains in critical condition

    Jessica Falkholt's remains in critical condition

    Home and Away actress Jessica Falkholt's life support has been turned off after she was critically injured in a horror crash. The 29-year-old actress was involved in a Boxing Day crash while traveling with her parents and sister.
    Standalone 'Black Widow' Movie Finally Gets The Go-Ahead

    Standalone 'Black Widow' Movie Finally Gets The Go-Ahead

    Hathaway also " tapped " Schaeffer to write her Dirty Rotten Scoundrels remake , Nasty Women . You can click right here for more on Black Widow if interested.
  • Dropbox files for IPO with potential $10bn valuation

    Dropbox files for IPO with potential $10bn valuation

    Taking on the risk of lending to a private company can typically help a firm's chances in underwriting an eventual IPO. Naturally, the investment community will want to see how the company's share price will fare in the post-IPO period.
    Rose McGowan says Weinstein Legal Action May Cost Actress Her Home

    Rose McGowan says Weinstein Legal Action May Cost Actress Her Home

    So it's actually been really exciting for us as producers to work with her and incorporate a lot of the filming that she's done. She said she has been "disappointed" by some media coverage of the movement and is skeptical of the #TimesUp cause.
    CES Tech Conference Hit with Major Power Outage

    CES Tech Conference Hit with Major Power Outage

    In a hilarious twist, the event lost power for nearly two hours, leading to some areas getting closed. Young woman plays violin to entertain attendees at the Intel booth during #CES2018 blackout.
  • Razer wants its smartphone to be a laptop

    Razer wants its smartphone to be a laptop

    The infamous gaming company is known for their wide variety of gaming peripherals including laptops, mice, displays , and more. It sports a 13.3-inch Quad HD touchscreen display and is backed by a 53.6Wh internal battery .
    Israel PM Benjamin Netanyahu to visit India next week

    Israel PM Benjamin Netanyahu to visit India next week

    He said the bilateral commerce between the two countries stood at $5 billion in 2016-17 which did not include defence trade. In Mumbai, Netanyahu will meet Jewish community leaders and select members of the Indian business community.
    Vuzix and Amazon Partner To Bring Augmented Reality Glasses with Alexa Support

    Vuzix and Amazon Partner To Bring Augmented Reality Glasses with Alexa Support

    Dish equipment including Dish's Hopper, Joey and Wally set-top boxes can already be controlled via Amazon Alexa . Google will then provide the logic for the smart screens with the incorporation of Google Assistant.

Comments

Latest news

Announces transfer from Georgia
The indication is that Eason will transfer to Washington , which is what the Seattle Times reported earlier in the week. Despite the unfortunate circumstances, he really bonded with Fromm and worked hard to help him prepare for the games.

IRS rolls out new tax tables for promised bigger paychecks
Treasury Secretary Steven Mnuchin said the Treasury is closely following the growth of cryptocurrencies, particularly bitcoin. In the letter, Wyden and Neal said that withholding too little in taxes presents "a considerable problem and undue hardship".

SpaceX, Pentagon wash hands of mysterious Zuma mission
But a failure would not be "devastating", she said, noting that the company is given credit for its ambitious goals. This means as soon as the status of the satellite is confirmed, the listing of Zuma as a payload shall be updated .

100% FDI in retail will harm shopkeepers, says CPI-M
For investments beyond 49%, special regulatory permissions were required from the concerned Govt. departments. This will, in effect, allow 100 per cent FDI under automatic route for SBRT.

Two Former WWE Women's Champions Contacted For Women's Royal Rumble Match
Both would make welcome additions to the match, and with 13 spots still to fill, they won't be the last to be linked. We will continue to update this list as more matches and Royal Rumble match entrants are announced.

Gillian Anderson is done with The X-Files after this season
Mulder, however, may continue in his search; Duchovny said he was "good either way" if the show continued or ended. Reported by The Hollywood Reporter , Anderson said, "It's time for me to hang up Scully's hat".

Not Too Late to Get a Shot or Get a Jab
Typical side effects include soreness, redness and swelling at the injection site, headache, fever, nausea and muscle aches. A strain of Australian flu is working its way across the country with more than 1,600 people struck down with symptoms.

Truth & Lies: The Tonya Harding Story
Golden admitted to using a hairbrush to "spank" Harding at a competition, but denied she was habitually abusive toward Harding. At left is Kristi Yamaguchi, with third place Nancy Kerrigan at right. "I think she's having a great moment".

Israel Launches Security Campaign in Nablus After the Killing of Settler
J Street and its student affiliate, J Street U, launched a campaign a year ago to prevent the demolition of Palestinian homes . The attack took place near Havat Gilad, an unauthorized Israeli settlement outpost near Nablus.

Kim Kardashian's Surrogate Set to Give Birth 'Any Day Now'
Their third child, who is being delivered via surrogate, will be a baby girl and is expected to be born in the next few days. She suffered from early-onset preeclampsia with North and had to deliver nearly six weeks early in 2013.

Ecuador gives Assange citizenship, seeks solution with Britain
For some, Assange is an activist who exposed government abuses of power and championed free speech. A United Nations panel concluded in 2016 that Assange was under arbitrary detention.

Alabama's Minkah Fitzpatrick, Ronnie Harrison declare for 2018 NFL Draft
The younger Nix is a 6-2, 194-pounder from the Birmingham, Ala., suburb of Pinson. Scarbrough averaged 5.7 yards per carry over his three years at Alabama.

E Coli Outbreak Spreads to 15 States; Leafy Greens Suspected
The Centers for Disease Control and Prevention said there are seven new E. coli cases in the U.S.in an ongoing outbreak . For the record, symptoms of E. coli begin two to eight days after consuming the bacteria, notes CNN .

Google wants your phone screen to double as a speaker
Not only does this mean that more advanced haptic feedback is possible, but the displays can also be used as speakers. According to Bloomberg , Redux was purchased via an Ireland-based subsidiary of Google at some point previous year .

Signs pointing to Matt Patricia as Giants coach
Patricia could take some members of the Patriots coaching staff with him, so that is something to watch for in the coming weeks. Bottom line is no one really knows until the Patriots are eliminated from the playoffs and offers can be extended.

Other news